$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft File: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft (raw, json) Hash identifier: H6Tvn+PKcC3io7YtkYfmVJp2wxWT0FYCCn58/m6VaH0= Subject key identifier: 36:21:FF:BD:1B:44:67:AC:5E:43:D3:50:57:D8:7D:D6:3C:B9:C8:6F Authority key identifier: 24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E Certificate issuer: /CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Certificate serial: 37F522CD3F4E29C0279C4BAC76E80F34A4E624F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft Manifest number: E9 Signing time: Sun 25 Oct 2026 09:48:48 +0000 Manifest this update: Sun 25 Oct 2026 09:43:48 +0000 Manifest next update: Mon 26 Oct 2026 13:35:48 +0000 Files and hashes: 1: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: kBjc6OXZ/6vxacL9UgjRAviZ4OmFuFSXJVueUFg8fnE=) 2: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: IoDA8uRnuH2Y6CGJmD83Fs8xZFkU0MuwdHuMYgo3MNI=) 3: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl (hash: KYWlOA8FvbYeMJGrssfA3F6DNuOWgCyfsRPkqT0V3Bs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f5:22:cd:3f:4e:29:c0:27:9c:4b:ac:76:e8:0f:34:a4:e6:24:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E Validity Not Before: Oct 25 09:43:48 2026 GMT Not After : Oct 26 13:35:48 2026 GMT Subject: CN=3621FFBD1B4467AC5E43D35057D87DD63CB9C86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:bc:d3:ee:f4:66:af:89:f7:7e:7f:d3:82: 2b:36:87:4c:f6:68:52:eb:a8:6d:31:ef:e3:54:ec: 37:9c:50:34:e4:24:e4:5e:1f:ba:6a:c6:96:b3:d5: 76:31:6c:ef:a6:e1:48:70:5d:e9:50:c4:9f:63:dd: 06:20:af:2a:7b:66:c3:1d:e7:80:7c:72:e1:ba:7c: d9:4c:74:15:2d:9b:a7:c5:38:a0:84:86:32:d8:92: f6:0d:93:f1:ab:4f:ef:18:d4:8b:3e:07:36:4f:ab: 69:d8:25:c0:7d:32:0e:00:d2:e7:61:69:df:e7:8c: 4a:ed:0c:7a:71:0d:5f:48:e5:e0:bb:a5:e7:76:c1: e4:65:a5:78:df:b8:42:f0:e6:40:d4:3c:fe:3b:a4: f7:23:f4:b1:ac:6c:46:a7:8b:6f:fb:a4:ac:19:08: 7b:ad:80:5a:85:72:9c:d4:4a:c7:58:eb:a5:37:e6: c2:9c:00:43:10:c8:bd:7c:74:51:e3:40:36:79:21: e0:8b:ea:c1:82:d1:27:a7:e8:7b:ba:44:81:0d:fa: 59:90:f3:d5:43:59:23:5c:00:a5:47:d1:ff:c7:c5: 8b:08:2a:0b:65:69:77:03:d2:64:51:99:8f:33:af: 1d:27:45:f8:63:1b:b1:de:10:34:0b:24:26:2a:37: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:21:FF:BD:1B:44:67:AC:5E:43:D3:50:57:D8:7D:D6:3C:B9:C8:6F X509v3 Authority Key Identifier: keyid:24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:97:e4:e6:10:fc:dd:49:5c:b9:3f:41:e3:ae:f1:69:c4:77: 34:31:97:16:31:c5:8b:23:0e:eb:96:ce:e3:d4:cb:b6:de:cc: e5:c0:a9:f8:e3:31:89:7c:9a:eb:d3:f8:1f:52:5b:8f:99:5f: 01:7c:8e:d1:0f:f1:e5:7a:68:f1:d2:05:7b:ed:8f:3a:47:a7: c0:b9:49:2f:b4:8a:c7:95:e5:88:c7:a1:c1:98:7f:aa:e9:21: b9:e0:2a:57:8d:79:83:72:98:24:90:16:d7:e1:17:20:7a:81: b7:f0:64:35:1c:85:8e:05:27:a6:ae:5a:5f:15:92:33:08:a4: d5:e2:71:2d:86:7a:b4:29:64:02:e2:d3:7a:92:90:9a:d0:bb: 79:db:d7:ee:18:8b:48:f5:f4:31:75:bc:a0:b1:72:d0:01:68: 98:16:dc:0f:a6:1c:ef:42:fe:69:f1:8b:7f:d1:51:e9:2e:48: 68:75:86:cf:ea:c5:5a:02:e3:39:61:e7:10:91:8e:f0:86:0b: 12:f6:04:e7:bb:40:d5:fd:cc:63:07:ab:86:0b:4e:64:74:63: 49:17:41:09:04:b0:f0:fd:ce:9a:20:aa:ad:67:5d:bc:06:87: f8:27:28:0e:42:2f:64:f3:98:04:cb:f7:3b:98:72:69:70:c4: 73:44:c6:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/UizT9OKcAnnEusdugPNKTmJPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJD MURFODMyRTAeFw0yNjEwMjUwOTQzNDhaFw0yNjEwMjYxMzM1NDhaMDMxMTAvBgNV BAMTKDM2MjFGRkJEMUI0NDY3QUM1RTQzRDM1MDU3RDg3REQ2M0NCOUM4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWwrzT7vRmr4n3fn/Tgis2h0z2 aFLrqG0x7+NU7DecUDTkJOReH7pqxpaz1XYxbO+m4UhwXelQxJ9j3QYgryp7ZsMd 54B8cuG6fNlMdBUtm6fFOKCEhjLYkvYNk/GrT+8Y1Is+BzZPq2nYJcB9Mg4A0udh ad/njErtDHpxDV9I5eC7ped2weRlpXjfuELw5kDUPP47pPcj9LGsbEani2/7pKwZ CHutgFqFcpzUSsdY66U35sKcAEMQyL18dFHjQDZ5IeCL6sGC0Sen6Hu6RIEN+lmQ 89VDWSNcAKVH0f/HxYsIKgtlaXcD0mRRmY8zrx0nRfhjG7HeEDQLJCYqN4vHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNiH/vRtEZ6xeQ9NQV9h91jy5yG8wHwYDVR0j BBgwFoAUJGm+PnnuYk3pw9bWMHtkgsHegy4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBiNTkwZTgtNGY4OS00Nzg1LWFlNzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3 OUVFNjI0REU5QzNENkQ2MzA3QjY0ODJDMURFODMyRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNDY5QkUzRTc5RUU2MjRERTlDM0Q2RDYzMDdCNjQ4MkMxREU4 MzJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvMjQ2OUJFM0U3OUVFNjI0REU5QzNENkQ2MzA3QjY0 ODJDMURFODMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOX5OYQ/N1JXLk/QeOu8WnEdzQxlxYxxYsj DuuWzuPUy7bezOXAqfjjMYl8muvT+B9SW4+ZXwF8jtEP8eV6aPHSBXvtjzpHp8C5 SS+0iseV5YjHocGYf6rpIbngKleNeYNymCSQFtfhFyB6gbfwZDUchY4FJ6auWl8V kjMIpNXicS2GerQpZALi03qSkJrQu3nb1+4Yi0j19DF1vKCxctABaJgW3A+mHO9C /mnxi3/RUekuSGh1hs/qxVoC4zlh5xCRjvCGCxL2BOe7QNX9zGMHq4YLTmR0Y0kX QQkEsPD9zpogqq1nXbwGh/gnKA5CL2TzmATL9zuYcmlwxHNExts= -----END CERTIFICATE-----Generated at Sun Oct 25 14:35:03 2026 by rpki-client